Information System Security Manager

Job Description

Job Description

Information System Security Manager (ISSM), Level 4 Overview We are recruiting a seasoned ISSM to support a Department of Defense program based in Lorton, Virginia. In this role you will safeguard the security posture of program information systems, hold the line on DoD and industry compliance, and build out the policies and procedures that keep classified environments protected. Day to day you will partner closely with ISSOs, system administrators, the Authorizing Official (AO), and other program stakeholders. If you bring depth in security management, RMF, and risk and compliance leadership, we want to connect. What You Will Do

• Author and administer the implementation policy and procedural guidance that governs security for operational information systems.
• Sit as a voting participant on the Configuration Control Board (CCB) or Risk Executive Board, empowered to halt any proposed change judged a security concern.
• Confirm that ISSOs reporting to this role are designated in writing and adhere to standing security procedures, and step into ISSO duties yourself during any gap in coverage.
• Establish and sustain a documented information security program, along with the governing policies applied across operational environments.
• Keep a central store of security documentation, Client included, spanning every system that falls within scope.
• Verify that administrators track their systems for weaknesses or active threats and that recurring security assessments are carried out.
• Enforce configuration management (CM) procedures on all hardware and software modifications, clearing each change with the AO before it goes live.
• Coordinate with the PSO or the responsible security authority whenever external systems require authorization.
• Own, sustain, and carry out the continuous monitoring plan for information security.
• Organize security audits, evaluations, and reviews, and drive appropriate action the moment a vulnerability or incident surfaces.
• Confirm that sanctioned methods govern the clearing and release of media and hardware components.
• Sustain productive working ties with the ISO, AO, SCA, and peer ISSMs while advising the wider cybersecurity staff.

• A bachelor's degree in computer science, information technology, or a comparable discipline.
• Five to seven or more years managing information security functions.
• At least five years working within SCI/SAP settings.
• Hands-on familiarity with security tooling such as SIEM, IDS/IPS, and firewalls.
• A solid command of regulatory and security frameworks, including NIST, ISO 27001, and HIPAA.
• Strong leadership presence paired with clear communication ability.

• A credential such as AZ-500 (Azure Security Engineer Associate), SC-100 (Cybersecurity Architect Expert), AZ-305 (Azure Solutions Architect Expert), or an equivalent.
• Five or more years leading teams in a related domain.
• Azure-focused technical certifications.

• An active Top Secret clearance with SCI eligibility is mandatory.
• Candidates must live within commuting range of Lorton, VA or be open to relocating; a relocation assistance package is available.
• The position is fully onsite, five days a week, and may involve occasional travel.
• Precise, detail-oriented communication in both writing and speech.
• Comfort operating independently as well as within a mission-driven team.